Privacy Notice

Pursuant to the provisions of the Federal Law on the Protection of Personal Data Held by the Private Sector (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, the “Law”), Chacón & Rodríguez S.C. (“C&R”), located at Avenida Insurgentes Sur, No. 1605, piso 10, módulo D, Col. San José Insurgentes, Del. Benito Juárez, C.P. 03900, Mexico, D. F., makes this Privacy Notice (“Notice”) available for all individuals (“Holders”) whose personal data may be or is been treated by C&R.

C&R is committed to observe the principles of legality, consent, information, quality, purpose, loyalty, proportionality and accountability set forth by the Law.

Personal data collected by C&R will be used for following purposes: (i) to comply with obligations to the Holder; (ii) to provide the services requested by the Holder; (iii) to report modifications in the services provided by C&R; and (iv) to send the C&R newsletter.

The purpose set forth in the aforementioned section (iv) is not necessary for the existence and compliance of a legal relationship with C&R, therefore the Holder may refuse to the treatment of his personal data for such purpose by submitting a written request to C&R’s domicile or an email to the following address: privacidad@chro.com.mx within the 5 days following to the date the Holder was informed of this Notice. After the aforementioned term, the Holder may cancel its registration through the mechanisms provided in the corresponding newsletter.

To comply with the purposes set forth in this Notice, C&R may request the following personal information from the Holder: name, age, gender, physical characteristics, signature, official ID number, telephone, domicile, e-mail and tax number of the Federal Registry of Taxpayers.

The consent for the processing of personal data will be considered granted in the terms and conditions established in this Notice in case: (i) no opposition of the Holder has arisen with respect of this Notice; (ii) the Holder expressed his interest in hiring the services of C&R; and/or (iii) the Holder has an existing contractual relationship with C&R.

C&R is obliged to collect explicit consent of the Holder in case the processing relates to sensitive personal data, financial and/or property matters, except in the cases set forth in Article 10 of the Law.

C&R will not transfer personal data to third parties without the consent of the Holder.

The Holder may access, rectify, cancel, oppose, limit the use and/or disclosure, revoke consent and refuse to any personal data treatment not necessary for the existence and compliance of the legal relationship with C&R. The Holder may enforce the aforementioned rights by submitting a written request to C&R in its registered office or to the following email address: privacidad@chro.com.mx

The request shall contain the following: name, address and/or e- mail of the Holder; documents evidencing the identity of the Holder or its legal representation; a clear and precise description of the personal data in which respect the Holder’s rights are to be applied and any other element to facilitate the identification of its personal data.

C&R shall reply to the request within the following twenty days from the date in which such request has been received. The reply shall be notified in the domicile or e-mail address determined by the Holder for such purpose in the request.

Personal data requested through the access right, will be delivered to the Holder in plain paper or digital copies of the documents containing such data.

C&R maintains the right to make any modifications to the Notice, according to new legislation and/or internal policies, which will be notified to the Holder on the following internet website: www.chro.com.mx and/or through any other medium C&R uses for the dissemination of the notice.